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Abstract 

The  loop-free  predecessor  based  routing  algorithm 
(LPRA),  is  presented.  This  algorithm  eliminates  the  for¬ 
mation  of  temporary  routing  loops  without  the  need  for 
internodal  synchronization  spanning  multiple  hops  or  the 
specification  of  complete  path  information.  Like  other  al¬ 
gorithms,  LPRA  operates  by  specifying  the  second-to-last 
hop  and  distance  to  each  destination;  in  addition,  it  uses 
an  interneighbor  synchronization  mechanism.  A  detailed 
proof  of  correctness  is  presented  and  its  complexity  is  eval¬ 
uated.  Its  performance  is  compared  by  simulation  with  an 
ideal  link-state  algorithm  and  a  loop-free  algorithm  (called 
DUAL)  that  is  based  on  internodal  coordination  spanning 
multiple  hops;  both  algorithms  are  representative  of  the 
state  of  the  art  in  distributed  routing  algorithms.  The  sim¬ 
ulation  results  show  that  LPRA  is  a  better  alternative  than 
those  two  algorithms  in  terms  of  the  number  of  steps  needed 
to  converge  after  a  topological  change  and  is  comparable  to 
DUAL  in  terms  of  the  number  of  messages  and  CPU  cycles 
needed  to  converge  after  a  topological  change. 


1  Introduction 

Many  of  the  routing  protocols  used  in  today’s  networks 
are  based  on  the  distributed  Bellman-Ford  algorithm  (DBF) 
for  shortest-path  computation  [2],  However,  DBF  suf¬ 
fers  from  the  bouncing  effect  and  the  counting-to-infinity 
problems  [11].  Recently,  distributed  shortest-path  algo¬ 
rithms  [1,  7,  8,  10,  12]  that  utilize  information  regard¬ 
ing  the  length  and  second-to-last  hop  (or  predecessor)  of 
the  shortest  path  to  each  destination  have  been  proposed 
to  eliminate  the  counting-to-infinity  problem  of  DBF.  We 
call  these  type  of  algorithms  path-finding  algorithms.  Al¬ 
though  these  algorithms  provide  a  marked  improvement 
over  DBF,  they  do  not  eliminate  the  possibility  of  tempo¬ 
rary  loops.  The  loop-free  algorithms  repotted  to  date  rely 
on  mechanisms  that  require  routes  either  to  synchronize 
along  multiple  hops  [4,  3,  9],  or  exchange  path  information 
that  can  include  all  the  nodes  in  the  path  from  source  to 
destination  [6]. 
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In  this  paper,  we  present  a  path-finding  algorithm  that  is 
loop-free  at  every  instant.  We  call  this  algorithm  the  loop- 
free  predecessor-based  routing  algorithm  (LPRA).  Accord¬ 
ing  to  LPRA,  update  messages  are  sent  only  to  neighboring 
nodes.  LPRA  eliminates  all  temporary  loops  by  implement¬ 
ing  an  interneighbor  coordination  mechanism  with  which 
potential  temporary  loops  are  blocked  before  routers  can 
forward  data  through  them.  To  block  a  potential  temporary 
loop,  a  node  sends  a  query  to  all  its  neighbors  reporting  an 
infinite  distance  to  a  destination,  before  changing  its  rout¬ 
ing  table;  the  node  is  free  to  choose  a  new  successor  only 
when  it  receives  the  replies  from  its  neighbors.  To  reduce 
the  communication  overhead  incurred  with  interneighbor 
coordination,  nodes  use  a  feasibility  condition  to  limit  the 
number  of  times  when  they  have  to  send  queries  to  their 
neighbors.  In  contrast  to  many  prior  loop-free  routing  algo¬ 
rithms  [3,  4,  9],  queries  propagate  only  one  hop  in  LPRA. 
Furthermore,  updates  and  routing-table  entries  in  LPRA 
require  a  single  node  identifier  as  path  information,  rather 
than  a  variable  number  of  node  identifiers  as  in  prior  algo¬ 
rithms  [6]. 

Section  2  presents  the  network  model  assumed  in  LPRA. 
Section  3  provides  a  description  of  the  algorithm  and  an 
example  illustrating  key  aspects  of  its  operation.  Section  4 
provides  a  detailed  proof  of  LPRA’s  correctness.  Section  5 
addresses  the  performance  of  LPRA.  Finally,  Section  6 
presents  our  conclusions. 


2  Network  Model 

A  computer  network  is  modeled  as  an  undirected  graph 
represented  as  G(  V,  E),  where  V  is  the  set  of  nodes  and  E  is 
the  set  of  links  connecting  the  nodes.  Each  node  represents 
a  router  and  is  a  computing  unit  involving  a  processor,  local 
memory  and  input  and  output  queues  with  unlimited  capac¬ 
ity.  A  functional  bidirectional  link  connecting  the  nodes 
i  and  j  is  represented  as  if.  j)  and  is  assigned  a  positive 
weight  in  each  direction.  The  link  is  assumed  to  exist  in 
both  the  directions  at  the  same  time.  All  the  messages  re¬ 
ceived  (transmitted)  by  a  node  are  put  in  the  input  (output) 
queue  on  a  first-come-first-serve  basis  and  are  processed  in 
that  order.  An  underlying  protocol  assures  that:  (a)  every 
node  knows  who  its  neighbors  are;  this  implies  that  a  node 
within  a  finite  time  detects  the  existence  of  a  new  neighbor 
or  the  loss  of  connectivity  with  a  neighbor,  (b)  all  packets 
transmitted  over  an  operational  link  are  received  correctly 
and  in  the  proper  sequence  within  a  finite  time;  and  (c)  all 
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update  messages,  changes  in  the  link-cost,  link  failures  and 
link  recoveries  are  processed  one  at  a  time  in  the  order  in 
which  they  occur. 

Each  node  is  represented  by  a  unique  identifier.  Any  link 
cost  can  vary  in  time  but  is  always  positive.  The  distance 
between  two  nodes  in  the  network  is  measured  as  the  sum 
of  the  link  costs  of  the  shortest  path  between  the  nodes. 

A  node  failure  is  modeled  as  all  the  links  incident  on  that 
node  failing  at  the  same  time.  A  change  in  the  operational 
status  of  a  link  or  a  node  is  assumed  to  be  notified  to  its 
neighboring  nodes  within  a  finite  time.  These  services  are 
assumed  to  be  reliable  and  are  provided  by  the  lower  level 
protocols. 

A  path  from  node  i  to  node  j  is  a  sequence  of  nodes 
where  (i,  n i),  ( nx ,  nx+ 1),  ( nr,j )  are  links  in  the  path.  A 
simple  path  from  i  to  j  is  a  sequence  of  nodes  in  which 
no  node  is  visited  more  than  once.  The  paths  between  any 
pair  of  nodes  and  their  corresponding  distances  change  over 
time  in  a  dynamic  network.  At  any  point  in  time,  node  i 
is  connected  to  node  j  if  a  path  exists  from  i  to  j  at  that 
time.  The  network  is  said  to  be  connected  if  every  pair  of 
operational  nodes  are  connected. 

The  successor  to  destination  j  for  any  node  is  simply 
referred  to  as  the  successor  of  the  node,  and  the  same  ref¬ 
erence  applies  to  other  information  maintained  by  a  node. 
Similarly,  updates,  queries  and  responses  refer  to  destina¬ 
tion  j ,  unless  stated  otherwise. 


3  LPRA  Description 

Each  node  maintains  a  distance  table,  a  routing  table  and 
a  link-cost  table.  The  distance  table  is  a  matrix  containing 
the  distance  and  the  predecessor  entries  for  all  destinations 
through  all  the  neighboring  nodes.  The  routing  table  is  a 
column  vector  containing  the  minimum  distance  entries  for 
each  destination  and  its  corresponding  predecessor  and  suc¬ 
cessor  (or  next  hop)  information,  which  can  be  extracted 
from  the  distance  table.  The  implicit  path  information  from 
a  node  to  any  destination  node  can  be  extracted  from  the 
predecessor  entries  of  the  node’s  distance  and  routing  ta¬ 
bles.  The  link-cost  table  lists  the  cost  of  each  link  adjacent 
to  the  node;  the  cost  of  a  failed  link  is  considered  to  be 
infinity. 

LPRA  is  specified  in  pseudocode  form  in  Figure  1.  Pro¬ 
cedures  Initl  and  Init2  are  used  for  initialization.  Topology 
changes,  handling  of  the  feasibility  condition  (FC),  path 
traversal  in  the  distance  table  and  updating  of  the  routing  ta¬ 
bles  are  done  by  procedures  linkUp,  linkDown,  linkChange, 
FC,  ill-path  and  rt -update  respectively.  Procedures  Update, 
Query  and  Reply  handles  the  updates,  queries  and  replies 
respectively. 

An  update  message  consists  of  the  source  and  the  desti¬ 
nation  node  identifiers,  the  path  information  and  an  update 
flag  for  one  or  more  destinations.  The  update  flag  indicates 
whether  the  received  message  entry  is  an  update  (flag=0), 
query  (flag=l)  or  a  response  (flag=2).  The  time  at  which 
an  update  message  was  sent  and  the  number  of  hops  the 
message  has  traversed  so  far  can  be  recorded  as  well.  The 
distance  entry  in  a  query  is  always  set  to  oo. 

In  LPRA,  a  node  can  be  in  one  of  the  two  states  for  each 
destination,  passive  or  active.  A  node  is  passive  if  it  has 


a  feasible  successor,  or  has  determined  that  no  such  node 
exists  and  is  active  if  it  is  searching  for  a  feasible  successor. 
A  feasible  successor  for  node  i  with  respect  to  destination 
j  is  a  neighbor  node  that  satisfies  the  feasibility  condition 
(FC).  When  node  i  is  passive,  it  reports  Dj  in  all  its  updates 
and  replies.  However,  while  the  node  is  active,  it  sends 
an  infinite  distance  in  its  replies  and  queries.  Feasibility 
condition  (FC)  is  defined  as  follows: 

If  at  time  /  node  i  needs  to  update  its  current  successor, 
it  can  choose  as  its  new  successor  .sj  ( / )  from  any  node 
n  £  Ni(t )  such  that  i  is  not  present  in  the  implicit  path 
to  j  reported  by  neighbor  n,  Djn  +  din{t)  =  Dmin  = 
Min{Djx  -|-  dix(t)\x  £  and  Djn  <  FDj(t).  If  no 

such  neighbor  exists  and  Dj  =  oo,  node  i  must  keep  its 
current  successor.  If  Dm*n  =  co  then  sj(f)  =  null. 

The  successor  graph  for  destination  j  £  G,  denoted 
by  Sj(G),  is  a  directed  graph  where  nodes  are  the  same 
nodes  of  G  and  where  directed  links  are  determined  by  the 
successor  entries  in  the  nodal  routing  tables.  Loop-freedom 
is  guaranteed  at  all  times  in  G  if  Sj  ( G)  is  always  a  directed 
acyclic  graph. 

When  a  node  i  processes  an  update  from  its  neighbor 
k  for  destination  j,  the  distance  and  predecessor  entries 
in  the  distance  table  are  updated  (Step  1).  Also,  node  i 
determines  whether  the  path  to  destination  j  through  any 
of  its  other  neighbors  {6  £  Ni\h  f  k}  includes  node  k.  If 
the  path  implied  by  the  predecessor  information  reported 
by  node  b  to  destination  j  includes  node  k,  then  the  distance 
entry  of  that  path  is  updated  as  Djs  =  Dlki  +  Dj  and  the 
predecessor  entry  is  updated  as  pjs  =  pj  (Step  2).  Thus, 
a  node  can  determine  whether  or  not  the  update  received 
from  k  affects  its  other  distance  and  routing  table  entries. 

When  node  is  in  the  passive  state  and  detects  a  cost 
change  in  link  ( i ,  k )  or  receives  an  update  or  query  from 
neighbor  k,  it  first  updates  its  link-cost  table  with  the  new 
value  of  the  link  da ,  its  distance  table  with  Dj  k  =  Dj:  +  da 
and  Pj  k  —  p). .  After  that,  it  determines  whether  or  not  the 
node  has  a  feasible  successor,  i.e,  a  neighbor  node  that 
satisfies  FC. 

If  a  feasible  successor  is  found,  node  i  updates  its  dis¬ 
tance  and  predecessor  entries  of  its  distance  table  by  travers¬ 
ing  through  all  its  other  neighbors  (Step  2)  and  then  updates 
the  routing  table  entries  accordingly.  Node  i  sends  update 
messages  to  its  neighbors  if  the  routing  table  entries  have 
changed.  Furthermore,  node  i  sets  F  Dj  equal  to  the  smaller 
of  the  updated  value  of  Dj  and  the  present  value  of  F  Dj . 

If  node  i  does  not  find  a  feasible  successor,  then  I'  Dj 
is  set  to  oo.  In  addition,  node  i  keeps  its  current  path 
information  and  updates  the  distance  entry  in  the  distance 
table  (Steps  1  and  2).  If  Dj(f)  =  oo,  then  sj  (t)=null.  Node 
i  also  sets  the  reply  status  flag  (rjj.  =  1)  for  all  k  £  Ni 
and  sends  a  query  to  all  its  neighbors.  Node  i  is  then  said 
to  be  active,  and  cannot  change  its  path  information  until  it 
receives  all  the  replies  to  its  query.  If  the  input  event  was  a 
query  from  its  neighbor  after  which  i  became  active,  node 
i  responds  to  its  neighbor  k  with  the  distance  of  its  reply 
set  to  oo.  A  node  need  not  query  its  neighbor  node  k  due 
to  which  node  i  became  active.  Instead,  a  node  can  send  a 


reply  with  infinite  distance.  If  node  k  becomes  passive  after 
receiving  node  i’s  reply  and  changes  its  path  information, 
then  this  change  will  be  notified  to  node  i  by  an  update 
message. 

When  node  i  is  active  and  receives  a  reply  from  node  k,  it 
updates  its  distance  table  and  resets  the  reply  flag  (rl-k  —  0). 

Node  i  becomes  passive  at  time  t  when  r'jk(t)  =  0 
for  every  k  £  Ni-  At  that  time,  node  i  can  be  certain 
that  all  its  neighbors  have  processed  its  query  reporting  an 
infinite  distance  and  node  i  is  therefore  free  to  choose  any 
neighbor  that  provides  the  shortest  distance,  if  there  is  any; 
or  node  i  has  found  a  feasible  successor  through  one  of  its 
neighbors  k  £  TV,.  If  such  a  neighbor  is  found,  node  i 
updates  the  routing  table  as  the  minimum  in  distance-table 
row  for  destination  j  and  also  updates  F  £)j  =  Dj . 

A  node  need  not  have  to  wait  indefinitely  for  replies  from 
its  neighbors  because  a  node  replies  to  all  its  queries  regard¬ 
less  of  its  state.  Thus,  there  is  no  possibility  of  deadlocks 
due  to  the  interneighbor  coordination  mechanism. 

If  node  i  is  passive  and  has  already  set  !)’■  =  oo  and 
receives  an  input  that  implies  an  infinite  distance  to  j ,  then 
node  i  simply  updates  D]  k  and  da-  and  sends  a  reply  to 
node  k  with  an  infinite  distance  if  the  input  event  is  a  query 
from  node  k.  This  ensures  that  updates  messages  will  stop 
in  G  when  a  destination  becomes  unreachable. 

Node  i  initializes  itself  in  passive  state  with  an  infinite 
distance  for  all  its  known  neighbors  and  with  a  zero  dis¬ 
tance  to  itself.  After  its  initialization,  node  i  sends  updates 
containing  the  distance  to  itself  to  all  its  neighbors. 

When  node  i  establishes  a  link  with  a  neighbor  k,  it 
updates  its  link-costs  table  and  assumes  that  node  k  has 
repotted  infinite  distances  to  all  destinations  and  has  replied 
to  any  query  for  which  node  i  is  active;  furthermore,  if  node 
k  is  a  previously  unknown  destination,  node  i  initializes  the 
path  information  of  node  k  and  sends  an  update  to  the  new 
neighbor  k  for  each  destination  for  which  it  has  a  finite 
distance.  When  node  i  is  passive  and  detects  that  link  (i,  k) 
has  failed,  it  sets  da-  =  oo,  Dl-k  =  oo  and  pjjt=NIL;  after 
that,  node  i  carries  out  the  same  steps  used  for  the  reception 
of  a  link-cost  change  message  in  passive  state.  When  node 
i  is  active  and  loses  connectivity  with  a  neighbor  k,  it  resets 
the  reply  flag  and  resets  the  path  information  i.e,  assumes 
that  the  neighbor  k  sent  a  reply  reporting  an  infinite  distance. 

The  addition  or  failure  of  a  node  is  handled  by  its  neigh¬ 
bors  as  all  the  links  connecting  to  that  node  coming  up  or 
going  down  at  the  same  time. 

In  contrast  to  LPRA,  which  makes  a  node  i  check  the 
consistency  of  predecessor  information  repotted  by  all  its 
neighboring  nodes  each  time  an  update  is  processed,  Hum- 
blet’s  and  other  earlier  path  finding  algorithms  [1,  10,  8] 
check  the  consistency  of  the  predecessor  information  only 
for  the  neighbor  associated  with  the  input  event.  In 
LDR  [5],  the  path  information  is  sent  to  the  neighbors  by 
an  explicit  label.  Unlike  that,  in  LPRA,  path  information  is 
extracted  by  the  predecessor  information;  Therefore,  fixed 
size  update  entries  can  be  used,  rather  than  variable  size 
entries  that  can  contain  the  complete  path  in  some  cases. 

As  an  example  of  LPRA’ s  operation  and  its  loop-freedom 
property,  consider  the  five-node  network  depicted  in  Fig¬ 
ure  2.  In  this  network,  links  and  nodes  have  the  same 
processing  or  propagation  delays;  Q  represents  the  queries. 


Figure  2:  Example  of  the  Algorithm's  Operation 

R  replies  and  U  indicates  updates.  The  working  of  the  algo¬ 
rithm  is  explained  when  the  cost  of  the  link  {a,  j)  changes. 
The  arrowhead  from  node  x  to  node  y  indicates  that  node 
y  is  the  successor  of  node  x  towards  destination  j  (i.e, 
Sj  =  y).  The  label  in  parenthesis  assigned  to  node  x  in¬ 
dicates  the  feasible  distance  from  x  to  j  ( FD J),  current 
distance  (DJ),  and  predecessor  of  the  path  from  x  to  j  (pj). 
Steps  1  through  5  of  Figure  2  depicts  the  behavior  of  LPRA. 
Update  and  reply  messages  are  followed  by  the  value  of  rdj 
and  rpj  in  parentheses.  Nodes  in  the  active  state  are  indi¬ 
cated  with  a  circle  around  them.  F  Dj  is  always  decreasing 
as  long  as  node  i  is  in  the  active  state. 

When  node  a  detects  the  change  in  the  cost  of  the  link 
( a ,  j) ,  it  determines  that  it  does  not  have  a  feasible  successor 
as  none  of  its  neighbors  have  a  distance  smaller  than  F  Dj 
=  1.  Accordingly,  node  a  becomes  active  by  setting  the 
reply  status  flag  for  all  its  neighbors  for  destination  j 
and  sends  a  query  to  all  its  neighbors  (Step  1). 

Nodes  b  and  c  also  recognize  that  they  do  not  have  a 
feasible  successor.  This  is  achieved  in  a  single  step  as  the 
node  traces  through  all  its  neighbors  on  receipt  of  an  input 
event  (Step  2  of  the  pseudocode).  Node  b  (c)  becomes 
active  and  sends  query  to  c  (b)  and  reply  to  a.  On  the  other 
hand,  node  d  is  able  to  find  a  path  to  j  and  replies  with  the 
cost  of  the  alternate  path  to  j  to  node  a’s  query  and  updates 
its  distance  to  j  maintaining  the  same  feasible  distance. 

When  node  a  receives  replies  from  all  its  neighbors,  it 
becomes  passive  again,  and  replies  to  the  queries  of  nodes  b 
and  c  with  its  feasible  distance.  Having  found  their  feasible 
successor,  nodes  b  and  c  update  their  path  information  ac¬ 
cordingly.  All  nodes  exchange  update  messages  informing 
the  new  path  information  with  their  neighbors  (Step  4)  and 
the  final  stable  topology  is  shown  in  Step  5. 


4  Correctness  of  LPRA 

Time  T  is  defined  such  that  links  and  nodes  can  go  up 
and  down  and  the  cost  of  links  can  change  within  time 
interval  [0,T).  At  time  T,  the  nodes  adjacent  to  each  link 
have  updated  their  link  cost  and  status  information,  and 
there  are  no  more  changes  after  time  T.  An  upstream  node 


Procedure  Initl 

when  node  i  initializes  itself  do  begin 

set  a  link-state  table  with  the  current  costs  of  the  links 
set  AT  =  t;AT-  =  { x\dix  <  oo}; 
for  all  (x  G  Nt )  do  begin 
call  Procedure  Init2(x); 
for  all  (j  G  AT)  do  begin 


Procedure  FC 
(10)  begin 

compute  Vj  =  {  to  |  to  G  ATj  ,  D1  ^  <  FD\}\ 
compute  £?m  j  n  =  M t  to  { D\ ^  -(-  dlx  |x  G  AT  j  } ; 
compute  V~2  =  {  to  |  to  G  V\ ,  Dj  n  ■+  d^n  =  Drni. 
if(V2  =  <t>) 
then  return  (false)-, 
else  return  (true)-. 


Procedure  Update)  fc) 

when  vector  Vk’1  is  received  on  link  (t ,  fc ) 

do  begin 

(0)  begin 

RTEMP1  ■<—  4>-DTEMPl 


-  <£V  neighbors  b 


(1)  for  each  triplet  (j,  D ,  p^  )  in  Vk  > 1 ,  j  jz  i 

do  begin 

D']k  -  +d,k-p'Jk  -  pf- 

(2)  for  all  neighbors  b 

if  k  is  in  the  path  from  i  to  j  in  the  distance 
table  through  neighbor  b 


sets*  =  i,  pl.  =  i,  Dl  =  F  D.  =0; 
for  each  ( to  G  A Tj) 

do  add  update  U ( i )  to  end  of  LI  ST j  (  to)  ; 
call  Procedure  Send 

end 

Procedure  Init2 
begin 

set  M  =  N  U  x; 


set  Dx  =  FDj,  =  oo 

end 

Procedure  Link  J)own(  i ,  k ) 

(5)  when  link  (i,  k)  fails  do  begin 

delete  column  for  neighbor  k  in  ; 

d.k  =  \  = 

if (Dj  ^  oo) 
then  go  to  Step  (3); 

end 

Procedure  Link_Up(r,  k,  d^k) 

(6)  when  link  (i,  k)  comes  up  do  begin 

insert  column  k  in  D  j  ;  update  link-cost  table; 
set  r  *  =0; 

Execute  Procedure  Update(fc) 

Send  the  entire  routing  table  to  k ; 

end 

Procedure  LinkJChange(x ,  k) 

(7)  when  d^j,  changes  value  do  begin 

update  link-cost  table;  update  distance  table; 
execute  Procedure  Update(fc) 

end 

Procedure  Send 
begin 

for  each  ( n  G  ATj  )  do  begin 
if  (L I  ST j  (  to)  is  not  empty) 
then  send  message  M  j  [L I  ST±  (to)]  to  r 
Empty  L I STi(n) 

end 

end 

Procedure  Message 
when  node  i  receives  a  message  begin 
for  each  entry  in  the  message 

do  begin 

Check  the  type  of  the  message 
0:  [Entry  is  an  update  message] 

Call  Procedure  Update(fc) 

1:  [Entry  is  an  query] 

Call  Procedure  Query(fc) 

2:  [Entry  is  an  reply] 

Call  Procedure  Reply(fc) 

end 

end 

Procedure  In JPath(r,  k,  j,  b) 
begin 

set  h  * —  pl.  ,  ; 

3,° 

if  (h  =  i) 
then  retum(false) 
else  begin 
if  (h  -  k) 
then  return(true) 
elseIn_Path(i,  k,  h,b); 

end 

end 


Procedure  RT.Update 
begin 

initialize  all  destinations  to  be  unmarked 
for  any  unmarked  destination  j  do  begin 
if  there  is  no  finite  distance  in  row  j 
then  mark  j  as  undetermined 
else  begin 

TV  r-  4>- 

for  each  node  having  minimum  distance  from  i  to  j 
if  (k  =  successor) 

then  maintain  the  same  path  and  successor 
else  begin 

c  p*  TV  i—  TV  U  c; 

3*>  . 

repeat  c  TV  U  c; 

until  £5*  ^  is  not  minimum  of  row  c  or  Pc^  '■ 
is  marked 

if  ((p  *  ^  is  marked  as  undetermined)  or 
(D  *  ^  is  not  minimum  of  row  c)) 
then  mark  each  node  in  TV  as  undetermined; 
else  begin 

mark  each  node  in  TV  as  determined 


copy  the  routing  vector  to  V 1  if  the  distance  or  the 
predecessor  has  changed 


Procdure  Reply(fc) 

(9)  begin 

set  D\  =  rd k  +  dju.- ;  p*  ,  =  rp*  ; 

jk  3  Kl  jk  k 

set  r*,  =0; 

3k 

if(r*fe  =  0,  Vto  G  A T{) 
then  begin 
if  (FC  is  satisfied) 

then  begin 

if  ((£>*.  zfz  oo)  V  (£>*.fc  jz  oo)) 

then  begin 

set  F  D  *  =  D  m  ,•  _ 

3 

Call  Procedure  RT_Update; 

Add  Updates  to  LI  ST^jx),  Vx  G  AT- 

end 

end 

else  begin 

set  D  ■  —  oo ;  p  -  =null; 

3  3 

end 

end 

else  begin 

if  (fc  =  s*  ) 
v  3  ’ 

then  begin 

set.D*.  =  rd k  +dj^  ;p*.  =  rpk , 


then  if  (FC  is  satisfied)  begin 

if((T>j  Jz  oo)  V  (D*k  9*  «=)) 

then  begin 

set-FD*  =  ID  _  ■  ; 

3  171171 

Call  Procedure  RT-Update 
Add  updates  to  LI ST±  (to),  Vto  G  A Tj 

end 

end 

else  begin 

FD'.  —  oo ;  r  *  ,  =  1,  Vfc  G  AT,- ; 

3  3k  1 

if  (fc  =  null) 

D 1  =  oo;  p1  =  null; 

3  .  J 

else  D 1  —  Dk  -f  dz-u-.p1.  —  pK  : 

3  3  lk  3  3 

Add  queries  to  LJSTj(fe),Vfe  G  A 

end 

(4)  else  begin 

if  (fc  is  the  successor) 

then  begin 

set  D *  =  Dk  +  djf~ ; 


end 

Procedure  Query!  fc) 

(8)  begin 

set  D1 .  =  rdk  +  dik:p'  =  rpk  : 

3 K  3  3 K  3 

» (i  =  0 

then  add  reply  with  D 1  to  LI  ST^(k) 
else  begin 

if  (r  =  0,  Vx  G  ATj ) 

then  if  ((D*.  =  oo)  A  (D\^  =  oo)) 

then  add  reply  with  D  *.  to  L I  ST j  (  fc  ) ; 
else  begin 

if  (FC  is  satisfied) 

then  add  reply  with  D *.  to  LI  ST±  ( fc ) ) 
else  begin 

set  D1.  =  Dl  4-  d  .  •  ;  p*  =  pl 
3  is1  ts  ■  ■?  is 

1  3  3 

for  each  to  G  A/j  —  fc  do  begin 
set  r  *.  =  1 ;  F  D  *.  =  oo ; 


Add  query  to  L I  ST±  (  to) 


j  n 

Add  reply  with  oo  to  L I  ST  j  (fc  ) 

end 

end 

end 

else  begin 

if  (fc  =  «j) 

then  begin 

set  D *  =  rdk  4-  d,2.;p*.  =  rpk  ; 
3  j  '  IK  *  j 

end 

Add  reply  with  oo  toLISTj(fc); 


Figure  1:  LPRA  Specification 


with  respect  to  node  i  is  a  node  which  is  in  the  path  from 
source  i  to  destination  j. 

Proposition  1  If  a  loop  is  formed  in  the  successor  graph 
Sj  ( G )  for  the  first  time  at  time  t,  then  some  node  i  e  Cj(t) 
must  choose  an  upstream  node  as  its  successor  at  time  t . 

By  definition,  the  successor  graph  Sj (G)  is  a  directed 
acyclic  graph  before  the  loop  is  formed  at  time  t .  If  a  loop 
has  to  be  formed  at  time  t,  there  must  be  at  least  one  node 
k  £  Sj(G)  that  changes  its  successor  because  the  successor 
information  can  be  changed  only  when  an  update  occurs  or 
when  the  node  detects  a  change  in  a  link  cost  or  status.  This 
implies  that  an  upstream  node  will  be  chosen  by  some  node 
x  n 

Lemma  1  LPRA  is  free  of  deadlocks. 

Proof:  A  node  i  can  be  in  one  of  the  two  states  —  active  or 
passive  at  any  given  time.  A  node  receives  updates,  queries 
or  replies  at  any  given  time. 

When  the  node  is  in  the  active  state,  if  a  query  is  received 
from  a  neighbor,  the  node  replies  to  these  queries  with  an 
infinite  distance  since  the  node  is  still  in  the  process  of 
computing  its  path  information  at  that  time  (active  state). 
The  node  updates  its  distance  table  entries  when  either  an 
update  or  reply  message  is  received  in  active  state. 

When  the  node  in  passive  state  receives  a  message  from 
its  neighbor,  it  computes  the  feasible  distance  and  updates 
its  distance  and  routing  tables  accordingly  and  replies  to  the 
neighbors’  queries  with  its  feasible  distance  to  the  destina¬ 
tion.  If  a  feasible  distance  is  not  found,  the  node  forwards 
the  query  to  is  neighbors  and  sends  a  reply  with  an  infinite 
distance  entry  to  the  originator  of  the  query. 

Since  a  node  always  replies  to  the  neighbor’s  queries, 
deadlock  cannot  occur.  □ 

Lemma  2  The  change  in  the  cost  or  status  of  a  link  will 
be  reflected  in  the  distance  and  the  routing  tables  of  a  node 
adjacent  to  the  link  within  a  finite  time  after  time  T. 

Proof:  The  change  in  the  link  cost  can  be  due  to  the  link 
coming  up,  the  link  going  down,  or  the  link  changing  the 
link  cost. 

When  a  link  comes  up,  a  new  column  entry  is  added 
to  the  distance  table  and  the  new  link-cost  is  assigned  to 
the  corresponding  entry  in  the  distance  table  (Step  (6)). 
Procedure  RT_Update  is  called,  which  eventually  updates 
the  routing  table  entry. 

When  a  link  goes  down,  the  column  entry  is  deleted  and 
the  distance  entries  in  the  distance  table  will  be  set  to  oo 
(Step  (5)).  Procedure  RT_Update  again  updates  the  routing 
table  entries  accordingly. 

When  the  link  cost  changes,  the  distance  entry  in  the 
distance  table  is  updated  to  reflect  the  new  link  cost  (Step 
(1)  and  Step  (2)).  These  changes  are  updated  in  the  routing 
table  again  by  Procedure  RT_Update. 

By  assumption,  any  changes  that  occur  in  the  time  inter¬ 
val  [0,  T)  are  updated  by  time  T;  this  implies  that  the  link 
cost  changes  are  reflected  in  the  distance  and  routing  tables 
of  a  neighbor  node  within  a  finite  time  T.  □ 

Lemma  3  Within  a  given  finite  time  interval  [0,f),  the 
number  of  shortest  distance  values  to  a  given  destination  in 
a  routing  table  is  finite. 


Proof:  There  is  a  finite  number  of  links  in  the  graph  with 
a  finite  number  of  link  cost  changes  within  a  given  time 
interval  [0,  t ).  Therefore,  the  cardinality  of  the  set  is  finite. 
Also,  the  number  of  destinations  in  the  graph  are  finite. 
This  implies,  there  are  finite  number  of  entries  stored  in  the 
routing  table  of  each  node. 

The  value  of  the  shortest  distance  from  any  node  in  G 
to  a  given  destination  at  time  t  is  equal  to  the  cost  of  the 
link  or  the  sum  of  the  distance  from  the  successor  node  to 
the  destination  and  the  link  cost  to  the  successor  node  or 
infinity  if  a  node  does  not  have  a  successor.  This  implies 
that  there  are  finite  number  of  values  from  a  node  to  its 
destination  in  the  time  interval  [0,  t).  □ 

Theorem  1  A  finite  time  after  time  T,  the  muting  table 
structures  at  all  nodes  form  the  final  shortest  path. 

Proof:  The  proof  consists  of  showing  that  the  old  distance 
and  predecessor  information  present  in  any  one  node’s  rout¬ 
ing  and  distance  tables  are  updated,  and  that  the  shortest- 
path  trees  are  eventually  computed. 

A  change  in  the  cost  of  a  link  results  in  a  routing  table 
update  by  the  nodes  associated  with  that  link  (procedure 
RT_Update)  as  required.  When  a  node  has  to  select  a  new 
path,  all  the  minimum  distance  entries  in  the  distance  table 
are  found.  These  minimum  distance  entries  can  be  ob¬ 
tained  by  finding  the  minimum  of  the  distance  table  entries 
for  a  given  destination.  Also,  the  loop  freedom  of  the  im¬ 
plicit  path  can  be  ensured  by  the  predecessor  information 
present  in  the  node’s  routing  and  distance  tables  (procedure 
in_path).  This  implies  that  K ,  the  number  of  hops  in  the 
path  is  finite.  If  the  current  successor  is  the  same  as  the  suc¬ 
cessor  for  any  of  these  minimum  distance  entries,  then  the 
current  path  information  is  retained.  The  resulting  path  is 
the  shortest  path  in  the  final  graph;  otherwise,  the  new  path 
information  is  computed  and  the  routing  table  is  updated 
accordingly. 

It  follows  from  the  design  of  LPRA  that,  if  node  i  does 
not  have  a  path  to  node  j,  the  distance  in  the  routing  table 
is  set  to  oo.  Because  the  number  of  hops  K  is  finite,  and 
H(i,d),  the  maximum  number  of  links  in  the  path  from  i 
whose  distance  to  any  node  is  less  than  or  equal  to  d  in  the 
final  topology  is  finite,  all  paths  have  a  final  shortest  path. 

Let  the  initial  time  be  T(0)  =  T.  Let  T(K)  be  the  time  at 
which  all  messages  that  are  in  transit  at  time  T{  K—  1),  K  > 
0,  have  arrived  at  their  destination  and  have  been  processed. 
The  rest  of  proof  is  done  by  induction  on  K.  At  time 
K  =  0,  because  there  are  no  messages  to  be  transmitted, 
the  theorem  holds  true.  Assume  that  the  theorem  is  true  for 
some  K  =  M  >  0. 

A  path  of  M  +  1  links  is  the  concatenation  of  an  adjacent 
link  and  a  path  with  M  links.  From  the  definition  of  T(K), 
by  time  T(M  +  1),  the  routing  trees  computed  at  time 
T{M)  have  all  been  communicated  to  the  neighbors  of  the 
nodes  which  computed  such  trees.  By  Lemma  2,  these  link 
cost  changes  are  updated  in  the  node’s  distance  and  routing 
tables.  This  proves  the  theorem.O 

Lemma  4  No  node  in  the  network  G  can  be  active  after  a 
finite  time  t  for  any  destination. 

Proof:  Consider  a  network  G  with  a  stable  topology.  We 
need  to  consider  three  cases:  a  node  receives  a  query  from 


its  neighbor,  a  node  receives  an  update  message  from  its 
neighbor,  and  a  node  observes  a  link-cost  change. 

When  a  node  receives  a  query  from  its  neighbor,  re¬ 
gardless  of  the  state  of  the  node,  the  node  responds  to  the 
query  immediately  either  by  a  feasible  distance  (if  it  is  in 
passive  state)  or  by  sending  an  infinite  distance  (if  it  is  in 
active  state).  Therefore,  the  node  cannot  remain  active  for 
an  infinite  time  when  it  receives  a  query  from  a  neighbor. 

When  an  update  is  received  by  a  node  i,  and  if  i  has  a 
feasible  successor,  it  remains  in  the  passive  state,  updates 
its  distance  table  entries  within  a  finite  time  (step  1  in  the 
algorithm)  and  proceeds  accordingly.  If  the  node  is  unable 
to  find  a  feasible  successor,  it  becomes  active  by  sending 
queries  to  its  neighbors.  Since  a  node  responds  to  all  the 
queries  within  a  finite  time,  the  update  process  will  also  be 
done  in  a  finite  time. 

When  node  i  observes  a  link-cost  change,  the  distance 
table  at  i  is  updated  and  the  routing  table  is  updated  as 
defined  by  the  feasibility  condition.  The  updated  entries  at  i 
are  sent  to  neighbors  A')  as  updated  messages.  Since  update 
messages  are  processed  in  finite  time,  link-cost  changes  are 
also  processed  in  finite  time.  A  node  failure  is  treated  as  all 
the  links  incident  on  the  failed  node  going  down  at  the  same 
time  and  the  link  cost  changes  can  be  treated  as  a  link  going 
down  and  coming  up  with  a  new  link  cost.  Therefore,  this 
will  also  be  processed  within  a  finite  time. 

Therefore,  a  node  in  G  can  be  active  only  for  a  finite 
time  for  any  destination  j .  □ 

Lemma  5  If  at  time  t  all  nodes  in  the  graph  G  are  reachable 
from  one  another  then,  a  finite  time  after  t,  no  new  update 
messages  are  being  transmitted  or  processed  by  any  node, 
and  the  entries  corresponding  to  each  destination  j  in  all 
the  distance  and  routing  tables  are  correct. 

Proof:  Given  that  the  graph  G  is  finite,  there  is  a  finite 
number  of  entries  in  a  node’s  distance  and  routing  tables. 
From  Lemma  4,  we  also  have  that  a  node  cannot  be  active 
for  an  indefinitely  long  period  of  time.  Assume  that  at  time 
t,  all  nodes  in  G  are  reachable. 

After  time  t,  let  node  i  receive  an  update  message  due  to 
the  change  in  the  link-cost.  This  results  in  sending  update 
messages  to  all  the  neighbors  k  G  A).  From  Lemma  4, 
the  update  message  will  be  processed  in  finite  time  after 
receiving  it.  Also,  from  Theorem  1 ,  we  have  correct  entries 
in  the  node’s  distance  and  routing  tables  when  the  algorithm 
converges.  This  proves  Lemma  5.  □ 

Lemma  6  Assume  that  at  time  t  at  least  one  node  j  G  G  is 
inaccessible  to  a  connected  subset  of  nodes  Aj  C  N.  Then, 
no  node  i  G  Aj  can  terminate  for  node  j  with  Aj  <  oo. 

Proof:  This  lemma  is  proved  by  contradiction. 

Assume  that  node  i  G  Aj  does  terminate  LPRA  with 
a  finite  distance  at  time  ts  >  t;  this  implies  that  sj  is 
constant  and  Aj  is  constant  and  finite  since  time  ts .  Let 
aj  (A )  =  k\  then  because  all  link  costs  are  constant  after 
time  t,  Dj  (ts )  =  A*  (t s )  +  dik(t) .  It  is  obvious  that,  if  any 
node  i  G  Aj  terminates  at  time  t s ,  its  successor  sj  (ts )  must 
terminate  before  that  time.  Following  the  same  argument, 
and  traversing  the  path  i  to  j,  it  must  be  true  that  each  node 
x  in  such  a  path  must  have  a  constant  distance  AJ(A)- 


Thus,  because  |  Aj  |  and  Aj  (A )  are  finite  and  LPRA  is  free 
of  deadlocks  and  loops  [12],  a  node  n  must  be  reached  for 
which  Dj(ts)  =  lj(t)  and  s"(f, )  =  j;  this  is  impossible 

because  j  is  not  adjacent  to  any  node  in  Aj  at  time  t  <ts 
and  every  node  knows  its  neighbors.  Therefore,  the  lemma 
is  true.  □ 

Lemma  7  If  there  is  at  least  one  node  j  G  G  that  is  inac¬ 
cessible  to  a  subset  of  nodes  in  G  at  time  t  then,  a  finite 
time  after  t,  no  new  update  messages  with  an  entry  for  node 
j  will  be  transmitted  or  processed  by  nodes,  and  the  entries 
corresponding  to  node  j  in  all  topology  and  routing  tables 
are  correct. 

Proof:  By  contradiction. 

After  time  t,  G  must  consist  of  one  or  more  connected 
components  and  a  set  of  zero  or  more  isolated  nodes.  Be¬ 
cause  an  isolated  node  sets  all  its  routing-table  entries  to 
infinity  after  detecting  that  it  has  no  neighbors,  the  proof 
needs  to  consider  only  connected  components. 

Assume  that,  after  time  t.  node  j  is  unreachable  from  a 
set  of  nodes  that  constitutes  a  connected  component  of  the 
graph  Aj .  The  proof  needs  to  show  that  every  node  x  G  Aj 
sets  Dj  =  oo  a  finite  time  after  time  t  and,  therefore,  cannot 
change  that  entry  to  a  finite  value  until  a  new  topological 
change  occurs. 

If  node  n  G  Aj,  LPRA  can  not  terminate  with  a  finite 
distance  (Lemma  6).  If  Aj  is  connected,  it  follows  from 
the  way  in  which  distances  and  successors  are  updated  that 
either  all  the  nodes  in  Aj  terminate  with  an  infinite  distance, 
or  each  of  them  keeps  sending  updates  reporting  changes 
in  its  distance  or  update  label  indefinitely. 

Assume  that  the  nodes  in  Aj  do  not  terminate,  and  con¬ 
sider  the  case  in  which  node  i  G  Aj  never  sets  Dj  —  oo 
after  a  finite  time  A  >  t.  If  this  is  the  case,  given  that  every 
node  in  Aj  has  a  finite  number  of  neighbors  and  that  no 
topology  changes  occur  after  time  t,  node  i  must  choose 
at  least  one  neighbor  node  that  satisfies  FC,  say  node  s,  as 
its  successor  an  infinite  number  of  times  after  time  A .  If 
this  is  true  for  node  i,  the  same  must  apply  for  node  s  and 
for  all  the  nodes  in  at  least  one  path  from  node  i  to  node  j. 
However,  every  node  knows  its  neighbors,  which  implies 
that  after  a  finite  time  tj  >  t  all  paths  in  Aj  must  lead  to 
nodes  who  have  set  their  distances  equal  to  oo.  Therefore, 
every  node  in  Aj  must  send  queries  (reporting  an  infinite 
distance)  an  infinite  number  of  successions  after  a  finite 
time  greater  than  or  equal  to  time  t.  From  the  assumption, 
no  node  in  Aj  terminates,  and  each  node  has  a  finite  num¬ 
ber  of  neighbors,  it  follows  that  node  i  must  choose  some 
neighbor  node,  say  s,  that  satisfies  FC  as  its  successor  and 
report  the  path  information  to  all  its  neighbors  x  G  Aj-  after 
receiving  all  the  replies  to  its  queries.  This  must  occur  an 
infinite  number  of  times  which,  however,  is  impossible. 

Node  i  G  Aj  has  a  path  to  the  destination  j  only  if  i  has 
Aj  <  oo.  This  is  not  possible  after  a  finite  time  larger  than 
or  equal  to  time  t,  as  all  the  nodes  know  their  neighbors  and 
it  is  assumed  that  there  are  no  topological  changes  after  time 
t.  Accordingly,  after  a  finite  time  tj  >  t,  whenever  node  i 
updates  its  routing  table  with  a  finite  distance  value,  it  must 
update  its  path  information  also.  Therefore,  for  node  i  to  be 
able  to  set  Dj  <  oo  an  infinite  number  of  successions  after 


time  t,  there  must  exist  an  infinite  number  of  paths  (even  if 
they  are  incomplete)  from  node  i  to  node  j  in  Sj  ( Aj )  after 
time  t,  which  is  impossible  because  Aj  has  a  finite  size. 

From  the  above,  it  follows  that  every  node  x  6  Aj  sets 
D f  =  ooa  finite  time  after  time  t,  and  the  lemma  is  true. 
□ 

Theorem  2  A  finite  time  after  t,  no  new  update  messages 
are  being  transmitted  or  processed  by  nodes  in  G,  and  all 
entries  in  distance  and  routing  tables  are  correct. 

Proof:  By  contradiction. 

Assume  that  the  transmission  of  update  messages  report¬ 
ing  topological  changes  never  ceases  or  terminates  with  in¬ 
correct  values  in  the  routing  tables.  This  implies  that  there 
must  be  at  least  one  row  (call  it  j )  of  the  routing  tables 
for  which  either  an  infinite  number  of  update  messages  are 
generated  or  incorrect  information  is  obtained.  After  time 
t,  either  all  nodes  are  mutually  reachable  or  at  least  one  is 
inaccessible  from  a  subset  of  nodes  in  the  graph.  As  Lem¬ 
mas  5  and  7  are  true  for  any  destination  j,  the  theorem  is 
true.  □ 


5  Performance  of  LPRA 

The  overhead  required  to  converge  to  correct  routing 
table  entries  in  the  worst  case  are  computed  assuming  that 
the  algorithm  behaves  synchronously  so  that  every  node  in 
the  network  executes  a  step  of  the  algorithm  simultaneously 
at  fixed  points  in  time.  At  each  step,  the  node  receives  and 
processes  all  the  inputs  originated  during  the  preceding  step 
and  if  required,  sends  update  messages  to  the  neighboring 
nodes  at  the  same  step.  The  first  step  occurs  when  at  least 
one  node  detects  a  topological  change  and  issues  update 
messages  to  its  neighbors.  During  the  last  step,  at  least  one 
node  receives  and  processes  messages  from  its  neighbors 
and  after  which  the  node  stops  transmitting  any  update 
messages  till  a  new  topological  change  has  taken  place. 
The  number  of  steps  taken  for  this  process  is  termed  as  time 
complexity  (TC)  and  the  number  of  messages  required  to 
accomplish  this  is  the  communication  complexity  (CC). 

DBF  has  a  worst-case  time  complexity  of  0(|A'|)  and 
worst-case  communication  complexity  of  0(  | IV2|),  where, 
N  is  the  number  of  nodes  in  the  network  G.  In  contrast, 
LPRA  can  be  shown  to  have  TC=0(a:)  and  CC=0(a:)  [12] 
where,  x  is  the  number  of  nodes  affected  by  a  single  topol¬ 
ogy  change. 

To  obtain  an  insight  into  the  average  performance  of 
LPRA,  the  algorithm  was  analyzed  by  simulation  using 
the  topologies  of  typical  networks.  Simulations  were  per¬ 
formed  using  Drama  [13]  along  with  a  network  simulation 
library.  The  performance  was  compared  with  a  diffusing 
update  algorithm  DUAL  [4]  and  an  ideal  link-state  algo¬ 
rithm  (ILS).  The  simulation  uses  link  weights  of  equal  cost, 
and  zero  link  transmission  delays.  During  each  simulation 
step,  a  node  processes  input  events  received  during  the  pre¬ 
vious  step  one  at  a  time,  and  generates  messages  as  needed 
for  each  input  event  it  processes.  To  obtain  the  average  fig¬ 
ures,  the  simulation  makes  each  link  (node)  in  the  network 
fail,  and  counts  the  steps  and  messages  needed  for  each 
algorithm  to  recover.  It  then  makes  the  same  link  (node) 


Table  1:  Simulation  Results  for  Los-Nettos 


recover  and  repeat  the  process.  The  average  is  then  taken 
over  all  link  (node)  failures  and  recoveries.  The  results  of 
this  simulation  for  Los-Nettos  are  shown  in  Table  1 .  The 
table  shows  the  total  number  of  events  (updates  and  link- 
status  changes  processed  by  nodes)  (EC),  the  total  number 
of  update  messages  transmitted  (PC),  the  total  number  of 
steps  needed  for  the  algorithms  to  converge  (DUR),  and  the 
total  number  of  operations  performed  by  all  the  nodes  in 
the  network  (OC). 

The  details  of  simulation  analysis  appear  in  [12],  How¬ 
ever,  it  is  worth  noting  that,  as  expected,  LPRA  and  DUAL 
have  better  overall  average  performance  than  ILS  after  the 
recovery  of  a  single  node  or  a  link.  The  simulation  results 
also  indicate  that,  insofar  as  overhead  traffic  is  concerned, 
the  average  performance  of  LPRA  is  comparable  to  DUAL 
and  ILS.  LPRA  converges  faster  than  DUAL  in  all  cases; 
in  particular,  LPRA  is  more  responsive  in  the  case  of  node 
failures,  which  is  a  concern  in  DUAL’S  performance  [4], 
CPU  utilization  on  ILS  is  two  orders  of  magnitude  larger 
than  in  LPRA  and  DUAL.  On  the  other  hand,  LPRA  con¬ 
verges  in  almost  the  same  number  of  steps  as  ILS  after  link 
and  node  failures.  Accordingly,  LPRA  constitutes  a  more 
scalable  solution  for  routing  in  large  internets  than  ILS  and 
even  DUAL. 


6  Conclusions 

In  this  paper,  we  have  presented  a  routing  algorithm 
(LPRA)  that  eliminates  the  formation  of  temporary  rout¬ 
ing  loops  without  the  need  for  internodal  synchronization 


spanning  multiple  hops  or  the  specification  of  complete 
path  information.  LPRA  works  on  the  notion  of  using  in¬ 
formation  about  the  second  to  last  hop  of  shortest  paths 
to  ensure  termination,  and  an  efficient  interneighbor  coor¬ 
dination  mechanism  to  eliminate  temporary  loops.  A  de¬ 
tailed  proof  of  the  correctness  and  loop-freedom  of  LPRA 
is  presented  and  its  complexity  is  analyzed.  The  worst-case 
complexity  of  LPRA  for  single  recovery /failure  is  O(x),  x 
being  the  number  of  nodes  affected  by  this  recovery /failure. 
LPRA  is  compared  with  DUAL  and  an  ideal  link  state  al¬ 
gorithm  (ILS)  by  simulation.  The  simulation  results  show 
that  LPRA  converges  faster  than  DUAL  for  single-resource 
changes  and  the  number  of  messages  exchanged  is  compa¬ 
rable  to  DUAL. 
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